SIEM Engineer
On site
Wokingham, United Kingdom
£ 527 / day
Freelance
06-03-2025
Job Specifications
Job Title: SIEM Engineer
Location: Wokingham (3 days per week onsite)
Salary/Rate: Up to £527 per day INSIDE IR35
Start Date: 03/03/2025
Job Type: Contract
Company Introduction
We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled SIEM Engineer to join their team for a three-month contract.
Job Responsibilities/ObjectivesBuild and deploy innovative technical solutions to advance the security capability of the Cyber Security Operations function.
Manage and oversee the configuration of various security tools to enable key stakeholders, such as CSOC and Threat Hunting and Detection Engineering (THaDE).
Collaborate with application administrators across the business to onboard data sources into the SIEM data lake.
Optimise forensic telemetry collection mechanisms to ensure accurate and efficient parsing and ingestion to the SIEM.
Build resilient forensic telemetry collection technologies to support 24/7/365 monitoring and its control systems by CSO.
Spearhead process improvement and curate, update and develop an internal cyber engineering knowledgebase (bonus points if you're already skilled in Mermaid or Markdown!)
Required Skills/Experience
The ideal candidate will have the following:Has proven experience working with SIEM platforms and related tooling.
Has a strong understanding of SIEM concepts and best practices. o Is familiar with SIEM telemetry onboarding processes and techniques.
Is knowledgeable about various data source formats and protocols (eg, syslog, JSON, REST API).
Has experience in troubleshooting and resolving data quality or ingestion issues.
Has previously worked closely with security tooling such as EDR, Deception Tech, Malware Sandboxes, Vulnerability Management Tooling, etc.
Is familiar with security incident response and investigation processes.
Has excellent problem-solving and analytical skills.
Has strong communication and collaboration abilities.
May have relevant certifications (eg GIAC), but this is not required.
If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format.
Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
About the Company
Fondée en 2018, Square One est une entreprise de service numérique (ESN), du Top 100 français, en pleine expansion proposant à une clientèle grands comptes de bénéficier de l’expertise et de la fiabilité de ses ingénieurs consultants pour l’analyse, le cadrage, le déploiement et l’exploitation de projets IT. Square One se positionne comme un « artisan » dédié à la transformation numérique de clients pour des activités de DevOps, de structuration cloud computing et de cybersécurité. Know more
Related Jobs
- Company Name
- Vanloq
- Job Title
- Virtualization Specialist
- Job Description
- Virtualization Specialist – 6-Month Contract (Inside IR35) – Remote (UK) – Financial Services We are seeking an experienced Virtualization Specialist to join our financial services client on a 6-month contract (inside IR35). This remote UK-based role requires a strong background in virtualization technologies, infrastructure automation, and capacity planning. You will play a key role in managing and optimizing the internal cloud platform while ensuring stability and performance. Key Responsibilities: Monitor and manage capacity planning for the internal cloud environment to ensure optimal resource utilization and performance. Design and develop infrastructure automation using tools such as vRealize Automation and Ansible. Troubleshoot and resolve performance issues, collaborating with cross-functional teams to maintain platform stability. Work with cross-functional teams to drive the delivery of new infrastructure and features. Provide technical support and respond to customer inquiries. Requirements & Skills: 5+ years of experience in VMware virtualization technologies, including vSphere, vCenter, vROPS, NSX, and SAN. Strong experience with automation and development tools (e.g., vRealize Automation, Ansible, Git, GitLab, Jenkins). Proficiency in capacity management and performance tuning within virtualized environments. Experience with cloud technologies and hybrid cloud environments. Proficiency in scripting languages such as PowerShell and Python. Strong expertise in VMware migration strategies is an advantage. Familiarity with Agile development methodologies (Scrum, Kanban, Lean). Excellent problem-solving skills and ability to work under pressure. Strong communication and collaboration skills to work effectively with stakeholders and teams. Ability to thrive in a fast-paced, dynamic environment. If you have a passion for virtualization, automation, and infrastructure management and are looking for an exciting contract opportunity within financial services, apply now!
- Company Name
- Lakarya
- Job Title
- IT Support technician (Onsite)
- Job Description
- Job Title: Local IT Support Technician Location: Milton Park, Abingdon, Oxfordshire, England OX14 4SE Employment Type: 12-Month Contract Job Overview: We are seeking a Local IT Support Engineer to provide technical support for end-users, IT infrastructure, and security management at our Milton Park, UK site. This role involves troubleshooting IT issues, maintaining IT infrastructure, and ensuring enterprise security compliance. Key Responsibilities: Activity-Specific Support: CCTV & BMS Systems: Manage and troubleshoot CCTV & Building Management Systems (BMS), ensuring smooth operations and security compliance. DNS Server & Firewall Management: Address network configuration issues, ensuring the firewall acts as the default gateway without providing DNS services. Evoko (Room Booking System): Resolve connectivity issues between room panels and the Evoko server, ensuring secure internet access. Conference Room Wi-Fi Issues: Diagnose and resolve Wi-Fi connectivity problems in meeting rooms for optimal performance. MCT211 Laptop Machinery Software: Install, configure, and troubleshoot MCT211 laptop software for seamless integration with IT infrastructure. 2. End-User IT Support: Provide hardware/software troubleshooting for desktops, laptops, and peripherals. Install and configure Windows OS, MS Office 365, and security applications. Enable Multi-Factor Authentication (MFA) via MS Authenticator. Deploy security measures, antivirus solutions, firewall settings, and data backup strategies. Assist end-users with IT system adoption, training, and documentation. 3. Network & Security Management: Maintain and troubleshoot Cisco & Palo Alto network infrastructure. Diagnose and resolve cabling, connectivity, and performance issues. Utilize DNA-C for network diagnostics and issue resolution. Coordinate with last-mile providers to ensure optimal connectivity. Implement access control policies and security protocols. Assumptions & Conditions: Remote L2 support for the UK is managed externally. Application troubleshooting & L1 support handled by respective providers. MFA, antivirus, and user backup platforms maintained by external partners. Move/Add/Change (MACD) requests are coordinated but executed by service providers. Includes 25 days of leave annually plus UK public holidays, with no replacement coverage during leave periods. Qualifications & Experience: Proven IT support experience in an enterprise environment. Hands-on expertise in Windows OS, Active Directory, and MS Office 365. Experience with Cisco & Palo Alto network tools and firewall security. Strong knowledge of IT compliance, security measures, and backup solutions. Excellent problem-solving skills and ability to work independently. Strong communication and customer service skills.
- Company Name
- Lakarya
- Job Title
- IT helpdesk support
- Job Description
- End-User Desktop Services The scope of typical end-user desktop services encompasses a range of support, management, and maintenance functions designed to ensure that users can effectively use their desktop environments. Key areas include: 1. Technical Support: Providing assistance for hardware and software issues, troubleshooting problems, and resolving user inquiries. 2. Installation and Configuration: Setting up new desktop systems, installing operating systems, applications, and configuring user settings. 3. User Account Management: Creating, modifying, and deleting user accounts, managing permissions, and ensuring security protocols are followed. 4. Software Deployment: Managing software distribution and updates, ensuring that users have access to the necessary applications and tools. 5. Device Management: Overseeing physical devices such as desktops, laptops, printers, and peripherals, including maintenance and repairs. 6. Multi-factor Authentication : Enable MFA registration via MS Authenticator and ongoing support and maintenance (mobile device changes etc) 7. Security Management: Implementing security measures like antivirus, firewalls, and encryption, as well as monitoring for compliance and vulnerabilities. 8. Backup and Recovery: Establishing backup solutions for user data and providing recovery options in case of data loss. 9. Performance Monitoring: Monitoring system performance and usage, identifying issues, and optimizing configurations for efficiency. 10. User Training and Documentation: Providing training sessions, guides, and documentation to help users navigate their desktop environments effectively. Provide hands-on support and guidance during the transition to new systems. Address user concerns and questions in real-time, ensuring a smooth adoption process. 11. Remote Support: Offering assistance through remote desktop tools to troubleshoot and resolve issues without needing physical access to the device. Monitoring and Feedback: Observe user interactions with the new systems to identify any issues or areas for improvement. Collect feedback from users to help refine configurations. Report any recurring problems or user difficulties to the Implementation team for further action Local Servers & Security Management 1. Server Management · Monitoring: Utilizing tools for real-time monitoring of server performance, resource usage, and uptime. · Backup and Recovery: Implementing regular backup schedules and recovery plans to protect data. · Updates and Patching: Ensuring that software and security patches are regularly applied. 2. Security Management · Firewall Configuration: Maintenance of firewall controls and policies to control traffic and protect the network from external threats. · Access Control: Implementing policies for user access to both servers and network resources Network Support & Maintenance 1. Network and LAN: Respond to network issues and outages promptly to minimise downtime. Diagnose and resolve hardware and software problems using Cisco and Palo Alto tools. Provide technical support to users. Communicate with stakeholders about network status and any planned changes or upgrades. 2. Wireless Network: Address connectivity issues, interference problems, and hardware failures. Provide support for users experiencing wireless network issues. Generate reports on network performance, incidents, and maintenance activities. 3. Infrastructure Cabling: Troubleshoot and repair cabling issues. Ensure that all connections are secure and functioning correctly. Keep detailed records of cabling infrastructure, including any changes or upgrades. Generate reports on maintenance activities and performance. 4. OSS: Use DNA-C to identify and address issues affecting users, such as slow connections or dropped packets. 5. Last Mile Providers: Work with providers to resolve connectivity issues. Ensure that service levels are maintained according to agreements. Document interactions with providers and any changes to service agreements. Provide reports on connectivity performance and any issues encountered. 6. Local End Users: Act as the first port of call for local end users, addressing their network-related issues and providing timely support. 7. Moves and Changes: Support moves, adds, and changes (MAC) within the network, ensuring minimal disruption and seamless integration. This proposal is for UK Site - Building 142A Park Drive, Milton Park, Abingdon, Oxfordshire, England OX14 4SE Out-of Scope: o Personal device support outside of company policy. o Support for any un-authorised locally built IT applications Assumptions: 1. End user engineer will install Application Client provided by Application provider. But Application troubleshooting, L1 support will be provided by Application provider. 2. MFA is already enabled by MS Licenses Implementation partner and only Operations is part of the scope. This would be applicable to Anti Virus, user Backup Platform as well. 3. MACD requests in same location where Equipment movement is required will be managed through respective provider, co-ordination work will be done by Onsite Engg. 4. Support window would be 8x5 in UK. 5. Resource would be entitled for UK public holidays and 25 days leaves in a year. During this time, replacement will not be provided. 6. Remote L2 support for UK has been incorporated in Sanand proposal
- Company Name
- Silicon Logic UK Ltd.
- Job Title
- Specialist
- Job Description
- Job Title: End User Computing (EUC) SME Duration: 2-3 Months Rate: £150/day Location: Office-based (Crawley, Bury Saint Edmunds, Newington & surrounding sites) Travel: Required (must have a valid UK driving license & car) Role Overview: Seeking an EUC SME to support SIM card replacements across various mobile devices (Android, iOS, Toughpad, Toughbook). The role involves device handling, troubleshooting, and hypercare support post-replacement. Key Responsibilities: Replace SIM cards across multiple devices. Communicate with end users & provide support. Configure network settings & troubleshoot SIM-related issues. Ensure secure data handling & accurate documentation. Work full-time from the office & travel as required. Required Skills: Experience with device configuration & troubleshooting. Understanding of cellular networks (2G/3G/4G/5G). Familiarity with APNs, SIM activation, and MDM/Intune. Strong communication & customer service skills. Additional Requirements: Must work 5 days from the office. Negotiation, client-facing & teamwork skills. Ability to adapt to unexpected technical issues. Must have a valid UK driving license & own car for travel.